Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16-06-2024 03:50
Behavioral task
behavioral1
Sample
e613b7067331c02952da93bce9043aef989a7637bb6c6f8f142a060dc06e7d5d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e613b7067331c02952da93bce9043aef989a7637bb6c6f8f142a060dc06e7d5d.exe
Resource
win10v2004-20240611-en
General
-
Target
e613b7067331c02952da93bce9043aef989a7637bb6c6f8f142a060dc06e7d5d.exe
-
Size
1.3MB
-
MD5
9b2186b29b37f679584e44e531fe1c5a
-
SHA1
2b0b2c6b5e1797c2fafed1e48d59225cc151f135
-
SHA256
e613b7067331c02952da93bce9043aef989a7637bb6c6f8f142a060dc06e7d5d
-
SHA512
4ea8de783a2c2720f47d2b274e2ccdf448376f4b6bab1614bff617918c1e87350e52fec93ce18571430930d24f6a1b7b68476019591a1b98af07f16ccbba1a90
-
SSDEEP
24576:i5QcS9rTEuxWct7XjEF0fJgz7YsXYRk4soOuhr/:oQRVY0fJgz7YsXgOg/
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 2 IoCs
resource yara_rule behavioral1/memory/2136-0-0x0000000000400000-0x0000000000547000-memory.dmp modiloader_stage1 behavioral1/memory/2136-2-0x0000000000400000-0x0000000000547000-memory.dmp modiloader_stage1